This Privacy Policy describes how bagvelia (“we”, “us”, “our”, or the “Data Controller”) collects, uses, processes, and protects your personal data when you visit or make a purchase from www.bagvelia.com (the “Site”).
This policy is designed to comply with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR), and applicable local privacy legislation in X-GJ.
—
1. Data Controller
For the purposes of applicable data protection laws, the Data Controller responsible for your personal information is:
Brand Name: bagvelia
Website: www.bagvelia.com
Contact Email: stardust@bagvelia.com
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us using the email provided above.
—
2. Personal Data We Collect
We collect personal information that you voluntarily provide to us when using our Site, placing an order, or communicating with us. This information includes:
Identity Data: Full name, title, and preferred form of address.
Contact Data: Email address, telephone number, shipping address, and billing address.
Financial & Transaction Data: Payment details, order history, purchase preferences, and records of transactions.
Technical Data: IP address, browser type and version, time zone setting, operating system, and standard web access log details collected automatically via cookies or similar technologies.
—
3. How and Why We Use Your Personal Data
We process your personal data under the following lawful bases pursuant to Article 6 of the GDPR and equivalent local regulations:
Performance of a Contract: To process, fulfill, ship, and communicate with you regarding your orders for our bags and accessories.
Compliance with Legal Obligations: To maintain proper business, tax, and accounting records, and to fulfill regulatory reporting requirements.
Legitimate Interests: To improve website functionality, manage customer service queries, conduct operational analytics, and protect our business and infrastructure against unauthorized activities or security risks.
—
4. Payment Processing
All payment transactions executed on our Site are handled directly through our third-party payment processor, Stripe.
When you place an order, your financial details (such as credit or debit card numbers, expiration dates, and security codes) are transmitted directly to Stripe’s payment infrastructure. We do not store, process, or retain complete credit card numbers or raw payment credentials on our own servers.
Stripe handles your payment data in accordance with their strict security protocols and their own privacy policy.
—
5. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including for the satisfaction of legal, regulatory, accounting, or reporting duties.
Order and Transaction Information: Retained for up to 7 years following completion of the transaction to comply with mandatory statutory tax, commercial, and financial record-keeping laws in X-GJ and the European Union.
Customer Support Records: Retained for up to 2 years after the resolution of the relevant query or issue.
Technical Logs and Analytical Data: Retained for a limited period, typically not exceeding 12 months, unless required for ongoing security or system reliability assessments.
Upon the expiration of the applicable retention periods, your personal data will be securely deleted, anonymized, or rendered permanently inaccessible.
—
6. Sharing and Disclosure of Information
We do not sell, rent, or trade your personal information to third parties. We disclose your data solely to trusted third-party service providers acting on our behalf to operate our business, such as:
Logistic, postal, and fulfillment partners to deliver your purchased goods.
Cloud hosting and IT infrastructure providers.
Professional advisers including lawyers, auditors, and accountants where strictly necessary.
All service providers are contractually bound to maintain confidentiality and to process your personal data exclusively under our instructions and in accordance with applicable data protection laws.
—
7. International Data Transfers
Where personal data is transferred outside X-GJ or the European Economic Area (EEA), we ensure that appropriate safeguards are implemented in accordance with applicable legal requirements. These safeguards include relying on Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or equivalent lawful mechanisms to guarantee an adequate level of data protection.
—
8. Data Security
We implement robust technical and organizational security measures designed to safeguard your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Access to your personal data is restricted exclusively to authorized personnel and processors who have a legitimate operational need to know such information.
—
9. Your Legal Rights
Under applicable European Union and local data protection regulations, you possess the following rights regarding your personal data:
Right of Access: The right to request copies of the personal data we hold about you.
Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): The right to request the deletion of your personal data, subject to statutory retention requirements.
Right to Restrict Processing: The right to request a suspension or limitation of the processing of your personal data under specific circumstances.
Right to Data Portability: The right to request the transfer of your personal data to you or a third party in a structured, commonly used format.
Right to Object: The right to object to the processing of your personal data based on legitimate interests.
Right to Withdraw Consent: The right to withdraw consent at any time where processing relies on your consent.
To exercise any of these rights, please submit a written request to stardust@bagvelia.com.
You also have the right to lodge a complaint with your competent local Supervisory Authority for data protection in your jurisdiction or within the European Union member state of your residence or place of work.
—
10. Cookies and Tracking Technologies
Our Site uses cookies and related technologies to ensure basic navigation functionality, analyze traffic, and improve website performance. You can control or modify your browser settings to decline or clear cookies at any time; however, restricting cookies may affect the operational availability of certain features on the Site.
—
11. Amendments to This Policy
We reserve the right to revise or update this Privacy Policy at our discretion to reflect changes in legal, regulatory, or operational requirements. Any updates will be posted directly on this page with an updated “Last Updated” date at the top. We encourage you to review this policy periodically.